$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: 42jEB17RZJL6VGsksZaTDSNWFTqxLCgx7VKH6bwXQZ8= Subject key identifier: 5E:E0:23:CD:B8:F3:34:B8:1A:52:9B:CB:95:52:02:BD:66:9F:95:32 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 55BB0C07E965BCD5771B1D8FD3265AF5A15E043A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 02A8 Signing time: Thu 04 Sep 2025 17:01:15 +0000 Manifest this update: Thu 04 Sep 2025 16:56:15 +0000 Manifest next update: Sun 07 Sep 2025 18:28:15 +0000 Files and hashes: 1: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: 1qisgGmZ4ZLz1lme/uSxLcvbwX2pXl2QEYezWVi61a0=) 2: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: 77398SPMHeLcdZxBAeXKBpi/oAiFP8LjR8eg2VDkS5o=) 3: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: KF7nH5pW5/ZblyJqWbcvRko2OuzeK910SdQ0o3we0k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bb:0c:07:e9:65:bc:d5:77:1b:1d:8f:d3:26:5a:f5:a1:5e:04:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Sep 4 16:56:15 2025 GMT Not After : Sep 7 18:28:15 2025 GMT Subject: CN=5EE023CDB8F334B81A529BCB955202BD669F9532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:6a:e3:97:61:0f:0c:05:55:3e:d0:b4:2d: 35:b6:ef:9f:8a:54:f1:ee:62:a9:26:d2:5b:b9:37: b8:0a:60:0a:c2:76:8c:12:4e:4b:76:b3:19:d8:11: 9e:62:35:67:f7:aa:c7:ec:8d:62:26:a0:a5:13:30: 4f:f3:36:2e:7b:42:38:e6:71:db:3d:25:7a:83:ef: e3:de:1d:06:8d:6b:d1:61:2d:bb:fc:f0:86:5b:d1: 4c:34:83:3d:1d:a1:42:21:d8:86:a8:37:1e:67:c7: 62:08:27:58:48:73:cf:d4:e5:3b:d6:08:3a:3a:99: d5:9a:9d:55:f3:d5:ed:1e:4c:99:ca:80:07:93:d0: c5:96:86:d0:a5:46:1c:3f:9a:34:7d:1d:33:26:ad: 9c:35:a1:d1:54:12:0f:34:a1:bb:8f:7c:e4:a4:e3: f2:12:d0:8c:b8:32:86:7d:76:97:16:61:df:52:7d: 12:1a:f8:80:c3:f9:17:f7:2c:e5:d3:07:06:96:a9: ca:28:b6:1d:df:c1:d2:af:41:f6:e9:3c:48:18:55: 89:0d:a4:99:cb:9a:ae:57:8e:d6:3f:ab:6f:9f:41: 8e:f5:bf:fe:18:e3:6d:a0:8b:44:8d:20:87:08:83: 2b:ff:e6:f6:05:61:7e:dd:1c:3d:df:97:85:12:0e: 3c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E0:23:CD:B8:F3:34:B8:1A:52:9B:CB:95:52:02:BD:66:9F:95:32 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f7:e8:d8:78:ce:fb:f0:d3:10:d1:2f:a4:0c:c0:6f:0c:3e: 50:15:87:c0:b2:5d:dd:29:e9:a5:a5:9e:fc:ad:06:de:9a:33: 0d:88:8d:8d:69:a2:ad:2c:dc:81:28:a7:48:4f:1f:d3:98:e9: d2:37:5e:8e:44:56:1b:eb:45:06:e3:30:04:70:0d:07:82:cb: 09:07:f3:e2:dd:90:1b:62:cf:d9:ee:aa:cb:aa:a5:6a:91:b1: 7e:ae:f1:ba:d7:33:53:30:b7:0f:e8:46:5b:06:83:46:d3:07: 96:01:45:5b:b0:bd:68:65:79:71:62:52:56:26:4c:8d:5d:1d: f0:13:94:2f:13:60:bd:46:41:9f:af:04:24:64:4e:1e:86:50: 9a:3e:ca:47:9a:2b:6d:10:57:09:4c:a7:40:91:59:3a:b4:13: 0f:37:b8:41:b0:94:67:b1:b2:1c:c3:70:dc:67:3d:e6:58:12: dd:a6:28:4e:40:84:3f:bb:89:57:ad:42:65:9f:35:cb:39:30: 13:ab:aa:5b:b4:30:07:19:9e:7a:08:c8:fd:18:9d:e7:f5:f9: 50:58:2c:c0:74:f7:1b:e5:d0:c0:c7:5e:7c:e5:65:8b:42:6d: c7:98:24:72:84:6a:b0:8d:2c:85:a8:af:b2:e0:b2:67:a9:91: 8e:25:7a:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbsMB+llvNV3Gx2P0yZa9aFeBDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTA5MDQxNjU2MTVaFw0yNTA5MDcxODI4MTVaMDMxMTAvBgNV BAMTKDVFRTAyM0NEQjhGMzM0QjgxQTUyOUJDQjk1NTIwMkJENjY5Rjk1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lGrjl2EPDAVVPtC0LTW275+K VPHuYqkm0lu5N7gKYArCdowSTkt2sxnYEZ5iNWf3qsfsjWImoKUTME/zNi57Qjjm cds9JXqD7+PeHQaNa9FhLbv88IZb0Uw0gz0doUIh2IaoNx5nx2IIJ1hIc8/U5TvW CDo6mdWanVXz1e0eTJnKgAeT0MWWhtClRhw/mjR9HTMmrZw1odFUEg80obuPfOSk 4/IS0Iy4MoZ9dpcWYd9SfRIa+IDD+Rf3LOXTBwaWqcooth3fwdKvQfbpPEgYVYkN pJnLmq5XjtY/q2+fQY71v/4Y422gi0SNIIcIgyv/5vYFYX7dHD3fl4USDjyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXuAjzbjzNLgaUpvLlVICvWaflTIwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj36Nh4zvvw0xDRL6QMwG8MPlAVh8CyXd0p 6aWlnvytBt6aMw2IjY1poq0s3IEop0hPH9OY6dI3Xo5EVhvrRQbjMARwDQeCywkH 8+LdkBtiz9nuqsuqpWqRsX6u8brXM1Mwtw/oRlsGg0bTB5YBRVuwvWhleXFiUlYm TI1dHfATlC8TYL1GQZ+vBCRkTh6GUJo+ykeaK20QVwlMp0CRWTq0Ew83uEGwlGex shzDcNxnPeZYEt2mKE5AhD+7iVetQmWfNcs5MBOrqlu0MAcZnnoIyP0Ynef1+VBY LMB09xvl0MDHXnzlZYtCbceYJHKEarCNLIWor7LgsmepkY4leqY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:53 2025 by rpki-client